Vulnérabilités de Red Hat Red Hat OpenShift AI 2.25

Votre version est-elle touchée ?

Liste des CVE

CVE	Résumé	Score	Publiée
CVE-2026-6734	Impact: When using Socks5ProxyAgent, undici reuses a single connection pool across different origins without verifying…	7.5 Élevée	17 juin 2026
CVE-2026-12151	Impact: The undici WebSocket client enforces maxPayloadSize on the cumulative byte count of fragments in a message but…	7.5 Élevée	17 juin 2026
CVE-2026-48779	ws is an open source WebSocket client and server for Node.js	7.5 Élevée	16 juin 2026
CVE-2026-50010	Netty is a network application framework for development of protocol servers and clients	7.5 Élevée	12 juin 2026
CVE-2026-48059	Netty is a network application framework for development of protocol servers and clients	8.7 Élevée	12 juin 2026
CVE-2026-48043	Netty is a network application framework for development of protocol servers and clients	5.3 Moyenne	12 juin 2026
CVE-2026-47691	Netty is a network application framework for development of protocol servers and clients	8.7 Élevée	12 juin 2026
CVE-2026-45674	Netty is a network application framework for development of protocol servers and clients	8.7 Élevée	12 juin 2026
CVE-2026-45416	Netty is a network application framework for development of protocol servers and clients	7.5 Élevée	12 juin 2026
CVE-2026-44893	Netty is a network application framework for development of protocol servers and clients	7.5 Élevée	12 juin 2026
CVE-2026-44249	Netty is a network application framework for development of protocol servers and clients	8.1 Élevée	11 juin 2026
CVE-2026-11816	Keras versions prior to 3.14.0 are vulnerable to a path traversal issue in the archive extraction utilities located in…	8.1 Élevée	11 juin 2026
CVE-2026-5241	A vulnerability in the LightGlue model loading path of huggingface/transformers version 5.2.0 allows an…	8.0 Élevée	3 juin 2026
CVE-2026-27145	(*x509.Certificate).VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name…	6.5 Moyenne	2 juin 2026
CVE-2026-34993	AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python	6.4 Moyenne	2 juin 2026
CVE-2026-8643	pip would treat console_scripts and gui_scripts as paths instead of file names without sanitizing the resolved…	4.1 Moyenne	1 juin 2026
CVE-2026-48526	PyJWT is a JSON Web Token implementation in Python	7.4 Élevée	28 mai 2026
CVE-2026-39821	The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label	9.6 Critique	22 mai 2026
CVE-2026-42508	Previously, a revoked 'SignatureKey' belonging to a CA was not correctly checked for revocation	9.1 Critique	22 mai 2026
CVE-2026-39829	The RSA and DSA public key parsers did not enforce size limits on key parameters	7.5 Élevée	22 mai 2026
CVE-2026-39835	SSH servers which use CertChecker as a public key callback without setting IsUserAuthority or IsHostAuthority could be…	5.3 Moyenne	22 mai 2026
CVE-2026-45736	ws is an open source WebSocket client and server for Node.js	4.4 Moyenne	15 mai 2026
CVE-2026-42587	Netty is an asynchronous, event-driven network application framework	7.5 Élevée	13 mai 2026
CVE-2026-42584	Netty is an asynchronous, event-driven network application framework	7.3 Élevée	13 mai 2026
CVE-2026-42579	Netty is an asynchronous, event-driven network application framework	7.5 Élevée	13 mai 2026

Autres produits Red Hat